General

  • Target

    4e4095098376a1f4d6fda6a5047519a252d27853a3cf4def5c6e731a21592cdb

  • Size

    1.1MB

  • Sample

    240209-kv19lsbf84

  • MD5

    5cfd5c4c94f7ddede2ef937bbe5d7722

  • SHA1

    60d7e235c38c205d377d7d2e477a981c0629a221

  • SHA256

    4e4095098376a1f4d6fda6a5047519a252d27853a3cf4def5c6e731a21592cdb

  • SHA512

    f1cc7759849cbf300d885ae618f4771cf65af5ee34396fd831c62179c5a814f6acee73de39e0a26f075083b63a8660d713a18c5ab53781dad03eaa74a8ddbf38

  • SSDEEP

    24576:KW4GI8JXs+C85Vv6S6pKZTY//db/C+/IBwjojy/2Pg/+e95:KgFXsX85Vv6S6pcTY/1jC+YwjXOPg/z5

Malware Config

Extracted

Family

hook

C2

93.123.39.235:3434

AES_key

Targets

    • Target

      4e4095098376a1f4d6fda6a5047519a252d27853a3cf4def5c6e731a21592cdb

    • Size

      1.1MB

    • MD5

      5cfd5c4c94f7ddede2ef937bbe5d7722

    • SHA1

      60d7e235c38c205d377d7d2e477a981c0629a221

    • SHA256

      4e4095098376a1f4d6fda6a5047519a252d27853a3cf4def5c6e731a21592cdb

    • SHA512

      f1cc7759849cbf300d885ae618f4771cf65af5ee34396fd831c62179c5a814f6acee73de39e0a26f075083b63a8660d713a18c5ab53781dad03eaa74a8ddbf38

    • SSDEEP

      24576:KW4GI8JXs+C85Vv6S6pKZTY//db/C+/IBwjojy/2Pg/+e95:KgFXsX85Vv6S6pcTY/1jC+YwjXOPg/z5

    • Hook

      Hook is an Android malware that is based on Ermac with RAT capabilities.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks